Release new patch version to fix plugin org.dita.pdf2.fop security issues

[arnoldas1]

Release new patch version to fix plugin org.dita.pdf2.fop security issues

[jelovirt]

@raducoravu I don't want to update whole FOP in a patch release. Batik 1.17 is

This is mainly a bug fix release, including 2 security fixes

So we should only update that.

[jelovirt]

@Roopesh-Navath Yes, you don't need org.dita.pdf2.fop if you're using org.dita.pdf2.axf or Antennahouse's PDF5

[jelovirt]

To release this in 4.1.3 we'd need to verify Batik 1.17 is compatible with FOP 2.8.

[raducoravu]

Maybe copy the changes from #4272 to the 4.1.3 hot fix branch?

[Roopesh-Navath]

I am using Antennahouse to generate PDF, Is this safe to remove the plugin org.dita.pdf2.fop from DITA OT?

[super-structure]

To release this in 4.1.3 we'd need to verify Batik 1.17 is compatible with FOP 2.8.

It does appear to be compatible with FOP 2.8. Tested with swapping it, updating references to the .jar, and publishing a PDF with an SVG figure. Not comprehensive testing, but promising.